事件監視器附錄 l:Appendix L: Events to Monitor

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

事件監視器附錄 l:Appendix L: Events to Monitor

下表列出活動,您應該會在您的環境中提供的建議依據監視適用於符號的危害監視 Active DirectoryThe following table lists events that you should monitor in your environment, according to the recommendations provided in Monitoring Active Directory for Signs of Compromise. 下表中 「 目前的 Windows 事件 ID 「 欄會列出係主要支援在目前的版本的 Windows 和 Windows Server 的事件編號。In the following table, the "Current Windows Event ID" column lists the event ID as it is implemented in versions of Windows and Windows Server that are currently in mainstream support.

「 傳統 Windows 事件 ID 「 欄列出對應 263 在舊版本的 Windows,例如 client 執行 Windows XP 的電腦或更早版本 」 和 「 伺服器執行 Windows Server 2003 或更早版本。The "Legacy Windows Event ID" column lists the corresponding event ID in legacy versions of Windows such as client computers running Windows XP or earlier and servers running Windows Server 2003 or earlier. 「 潛在嚴重性 「 欄辨識是否事件視為的低中] 或 [高嚴重性偵測攻擊和 「 事件摘要 ] 欄位中的提供的簡短描述事件。The "Potential Criticality" column identifies whether the event should be considered of low, medium, or high criticality in detecting attacks, and the "Event Summary" column provides a brief description of the event.

潛在的高嚴重性表示其中一應該調查發生的事件。A potential criticality of High means that one occurrence of the event should be investigated. 潛在關鍵性的中] 或 [低表示這些事件只發生意外或明顯測量一段時間中超過預期的基準的數字會調查。Potential criticality of Medium or Low means that these events should only be investigated if they occur unexpectedly or in numbers that significantly exceed the expected baseline in a measured period of time. 所有組織應該建立需要管轄調查回應警示之前都測試這些建議它們的環境中。All organizations should test these recommendations in their environments before creating alerts that require mandatory investigative responses. 每個環境不同,且部分排名潛在的高嚴重性的事件可能是因為其他無害事件。Every environment is different, and some of the events ranked with a potential criticality of High may occur due to other harmless events.

目前的 Windows 263Current Windows Event ID 舊版 Windows 的事件編號Legacy Windows Event ID 潛在關鍵性Potential Criticality 事件摘要Event Summary
46184618 不適用N/A High 發生了受監視的安全性事件模式。A monitored security event pattern has occurred.
46494649 不適用N/A High 偵測到重新執行攻擊。A replay attack was detected. 可能只是無害假因為錯誤錯誤。May be a harmless false positive due to misconfiguration error.
47194719 612612 High 已變更系統稽核原則。System audit policy was changed.
47654765 不適用N/A High 已加入 account 歷史 SID。SID History was added to an account.
47664766 不適用N/A High 嘗試新增 SID 歷史過去失敗。An attempt to add SID History to an account failed.
47944794 不適用N/A High 嘗試將設定 Directory 服務還原模式。An attempt was made to set the Directory Services Restore Mode.
48974897 801801 High 支援的角色分離:Role separation enabled:
49644964 不適用N/A High 特殊群組已指派給新的登入。Special groups have been assigned to a new logon.
51245124 不適用N/A High 已更新 OCSP 回應服務的安全性設定A security setting was updated on the OCSP Responder Service
不適用N/A 550550 媒體為 [高]Medium to High 攻擊可能拒絕的服務 (DoS)Possible denial-of-service (DoS) attack
11021102 517517 媒體為 [高]Medium to High 稽核已清除The audit log was cleared
46214621 不適用N/A 媒體Medium 系統管理員從 CrashOnAuditFail 復原系統。Administrator recovered system from CrashOnAuditFail. 現在會允許並非系統管理員的使用者來登入。Users who are not administrators will now be allowed to log on. 可能尚未記錄一些可稽核的活動。Some auditable activity might not have been recorded.
46754675 不適用N/A 媒體Medium 已篩選掉 Sid。SIDs were filtered.
46924692 不適用N/A 媒體Medium 已嘗試備份資料保護主要金鑰。Backup of data protection master key was attempted.
46934693 不適用N/A 媒體Medium 嘗試復原資料保護主要金鑰。Recovery of data protection master key was attempted.
47064706 610610 媒體Medium 已建立新信任的網域。A new trust was created to a domain.
47134713 617617 媒體Medium 已變更 Kerberos 原則。Kerberos policy was changed.
47144714 618618 媒體Medium 已變更加密的資料修復原則。Encrypted data recovery policy was changed.
47154715 不適用N/A 媒體Medium 已變更物件的稽核原則 (SACL)。The audit policy (SACL) on an object was changed.
47164716 620620 媒體Medium 已修改受信任的網域資訊。Trusted domain information was modified.
47244724 628628 媒體Medium 嘗試重設密碼。An attempt was made to reset an account's password.
47274727 631631 媒體Medium 建立安全性的全域群組。A security-enabled global group was created.
47354735 639639 媒體Medium 變更安全性功能的本機群組。A security-enabled local group was changed.
47374737 641641 媒體Medium 變更安全性的全域群組。A security-enabled global group was changed.
47394739 643643 媒體Medium 已變更網域原則。Domain Policy was changed.
47544754 658658 媒體Medium 已建立安全性功能的通用群組。A security-enabled universal group was created.
47554755 659659 媒體Medium 變更安全性功能的通用群組。A security-enabled universal group was changed.
47644764 667667 媒體Medium 已停用安全性的群組A security-disabled group was deleted
47644764 668668 媒體Medium 已變更群組類型。A group's type was changed.
47804780 684684 媒體Medium 設定 ACL 帳號,系統管理員群組成員。The ACL was set on accounts which are members of administrators groups.
48164816 不適用N/A 媒體Medium RPC 偵測到違反解密輸入訊息時完整性。RPC detected an integrity violation while decrypting an incoming message.
48654865 不適用N/A 媒體Medium 已新增受信任的樹系資訊項目。A trusted forest information entry was added.
48664866 不適用N/A 媒體Medium 已移除受信任的樹系資訊項目。A trusted forest information entry was removed.
48674867 不適用N/A 媒體Medium 已修改受信任的樹系資訊項目。A trusted forest information entry was modified.
48684868 772772 媒體Medium 「 憑證管理員 」 拒絕擱置的要求。The certificate manager denied a pending certificate request.
48704870 774774 媒體Medium 憑證服務撤銷憑證。Certificate Services revoked a certificate.
48824882 786786 媒體Medium 變更安全性憑證服務的權限。The security permissions for Certificate Services changed.
48854885 789789 媒體Medium 稽核篩選憑證服務的變更。The audit filter for Certificate Services changed.
48904890 794794 媒體Medium 憑證服務的憑證管理員 」 設定的變更。The certificate manager settings for Certificate Services changed.
48924892 796796 媒體Medium 變更憑證服務的屬性。A property of Certificate Services changed.
48964896 800800 媒體Medium 從 「 憑證資料庫已經一或多個列。One or more rows have been deleted from the certificate database.
49064906 不適用N/A 媒體Medium 已變更 CrashOnAuditFail 值。The CrashOnAuditFail value has changed.
49074907 不適用N/A 媒體Medium 已變更物件的稽核設定。Auditing settings on object were changed.
49084908 不適用N/A 媒體Medium 修改特殊群組登入資料表。Special Groups Logon table modified.
49124912 807807 媒體Medium 每個使用者稽核原則已變更。Per User Audit Policy was changed.
49604960 不適用N/A 媒體Medium IPsec 卸除失敗完整性檢查輸入封包。IPsec dropped an inbound packet that failed an integrity check. 如果問題持續存在,可能會在傳送到此電腦修改網路問題或該封包。If this problem persists, it could indicate a network issue or that packets are being modified in transit to this computer. 請確認傳送從遠端電腦的封包一樣收到此電腦。Verify that the packets sent from the remote computer are the same as those received by this computer. 這個錯誤可能也會指出交互操作其他 IPsec 實作的問題。This error might also indicate interoperability problems with other IPsec implementations.
49614961 不適用N/A 媒體Medium IPsec 卸除重播檢查失敗輸入封包。IPsec dropped an inbound packet that failed a replay check. 如果問題持續存在,它可能表示這部電腦重新執行攻擊。If this problem persists, it could indicate a replay attack against this computer.
49624962 不適用N/A 媒體Medium IPsec 卸除重播檢查失敗輸入封包。IPsec dropped an inbound packet that failed a replay check. 輸入封包必須太低順序號碼,以確定它不是執行。The inbound packet had too low a sequence number to ensure it was not a replay.
49634963 不適用N/A 媒體Medium IPsec 卸除應該已經保護輸入的明文封包。IPsec dropped an inbound clear text packet that should have been secured. 這通常是因為不需要告知這台電腦變更其 ipsec 遠端電腦。This is usually due to the remote computer changing its IPsec policy without informing this computer. 這也可能詐騙的攻擊。This could also be a spoofing attack attempt.
49654965 不適用N/A 媒體Medium IPsec 從遠端電腦的正確安全性參數指數 (SPI) 收到一封包。IPsec received a packet from a remote computer with an incorrect Security Parameter Index (SPI). 這通常被因為故障硬體已損壞封包。This is usually caused by malfunctioning hardware that is corrupting packets. 如果這些錯誤仍然存在,請確認傳送從遠端電腦的封包一樣收到此電腦。If these errors persist, verify that the packets sent from the remote computer are the same as those received by this computer. 這個錯誤可能也會指出交互操作其他 IPsec 實作的問題。This error may also indicate interoperability problems with other IPsec implementations. 若是如此,如果您不 impeded 連接,然後這些事件可以放心。In that case, if connectivity is not impeded, then these events can be ignored.
49764976 不適用N/A 媒體Medium 主要模式交涉,期間 IPsec 收到無效交涉封包。During Main Mode negotiation, IPsec received an invalid negotiation packet. 如果問題持續存在,它可能有網路問題或修改或重新執行此交涉嘗試。If this problem persists, it could indicate a network issue or an attempt to modify or replay this negotiation.
49774977 不適用N/A 媒體Medium 快速模式交涉,期間 IPsec 收到無效交涉封包。During Quick Mode negotiation, IPsec received an invalid negotiation packet. 如果問題持續存在,它可能有網路問題或修改或重新執行此交涉嘗試。If this problem persists, it could indicate a network issue or an attempt to modify or replay this negotiation.
49784978 不適用N/A 媒體Medium 期間延伸模式交涉,IPsec 收到無效交涉封包。During Extended Mode negotiation, IPsec received an invalid negotiation packet. 如果問題持續存在,它可能有網路問題或修改或重新執行此交涉嘗試。If this problem persists, it could indicate a network issue or an attempt to modify or replay this negotiation.
49834983 不適用N/A 媒體Medium IPsec 延伸模式交涉失敗。An IPsec Extended Mode negotiation failed. 被相對應的主要模式安全性關聯。The corresponding Main Mode security association has been deleted.
49844984 不適用N/A 媒體Medium IPsec 延伸模式交涉失敗。An IPsec Extended Mode negotiation failed. 被相對應的主要模式安全性關聯。The corresponding Main Mode security association has been deleted.
50275027 不適用N/A 媒體Medium Windows 防火牆服務無法從本機存放區擷取的安全性原則。The Windows Firewall Service was unable to retrieve the security policy from the local storage. 服務會繼續執行目前的原則。The service will continue enforcing the current policy.
50285028 不適用N/A 媒體Medium Windows 防火牆服務不能剖析新的安全性原則。The Windows Firewall Service was unable to parse the new security policy. 服務會繼續目前執行的原則。The service will continue with currently enforced policy.
50295029 不適用N/A 媒體Medium Windows 防火牆服務無法初始化驅動程式。The Windows Firewall Service failed to initialize the driver. 服務會繼續執行目前的原則。The service will continue to enforce the current policy.
50305030 不適用N/A 媒體Medium Windows 防火牆服務失敗開始。The Windows Firewall Service failed to start.
50355035 不適用N/A 媒體Medium Windows 防火牆驅動程式失敗開始。The Windows Firewall Driver failed to start.
50375037 不適用N/A 媒體Medium Windows 防火牆驅動程式偵測到重新執行階段重大錯誤。The Windows Firewall Driver detected critical runtime error. 終止。Terminating.
50385038 不適用N/A 媒體Medium 程式碼完整性判斷檔案的影像湊不正確。Code integrity determined that the image hash of a file is not valid. 檔案可能會損壞因為未經授權的修改或不正確湊可能是潛在的磁碟裝置發生錯誤。The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error.
51205120 不適用N/A 媒體Medium 開始使用 OCSP 回應服務OCSP Responder Service Started
51215121 不適用N/A 媒體Medium 停止 OCSP 回應服務OCSP Responder Service Stopped
51225122 不適用N/A 媒體Medium 在 OCSP 回應服務中變更設定項目A configuration entry changed in OCSP Responder Service
51235123 不適用N/A 媒體Medium 在 OCSP 回應服務中變更設定項目A configuration entry changed in OCSP Responder Service
53765376 不適用N/A 媒體Medium 已備份認證管理員認證。Credential Manager credentials were backed up.
53775377 不適用N/A 媒體Medium 從備份還原認證管理員認證。Credential Manager credentials were restored from a backup.
54535453 不適用N/A 媒體Medium 使用遠端電腦的 ikemefuna udeze,綽號和 AuthIP IPsec 金鑰模組 (IKEEXT) 服務不會開始,無法 IPsec 交涉。An IPsec negotiation with a remote computer failed because the IKE and AuthIP IPsec Keying Modules (IKEEXT) service is not started.
54805480 不適用N/A 媒體Medium IPsec 服務無法取得網路介面在電腦上的完整清單。IPsec Services failed to get the complete list of network interfaces on the computer. 因為某些的網路介面可能不會取得套用 IPsec 篩選器所提供的防護,這樣帶來潛在安全性風險。This poses a potential security risk because some of the network interfaces may not get the protection provided by the applied IPsec filters. 使用安全監視器嵌入式管理單元診斷的問題。Use the IP Security Monitor snap-in to diagnose the problem.
54835483 不適用N/A 媒體Medium 無法初始化 RPC 伺服器 IPsec 服務。IPsec Services failed to initialize RPC server. 不可能會開始 IPsec 服務。IPsec Services could not be started.
54845484 不適用N/A 媒體Medium IPsec 的服務發生嚴重失敗,並已關機。IPsec Services has experienced a critical failure and has been shut down. 關閉 IPsec 服務可讓電腦更攻擊風險的網路,或開放電腦以潛在的風險。The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks.
54855485 不適用N/A 媒體Medium 無法處理網路介面隨播放事件時,某些 IPsec 篩選器 IPsec 服務。IPsec Services failed to process some IPsec filters on a plug-and-play event for network interfaces. 因為某些的網路介面可能不會取得套用 IPsec 篩選器所提供的防護,這樣帶來潛在安全性風險。This poses a potential security risk because some of the network interfaces may not get the protection provided by the applied IPsec filters. 使用安全監視器嵌入式管理單元診斷的問題。Use the IP Security Monitor snap-in to diagnose the problem.
61456145 不適用N/A 媒體Medium 處理群組原則物件的安全性原則時,發生了一或多個錯誤。One or more errors occurred while processing security policy in the Group Policy objects.
62736273 不適用N/A 媒體Medium 網路原則伺服器無法存取的使用者。Network Policy Server denied access to a user.
62746274 不適用N/A 媒體Medium 捨棄的使用者要求的網路原則伺服器。Network Policy Server discarded the request for a user.
62756275 不適用N/A 媒體Medium 網路原則伺服器捨棄計量要求的使用者。Network Policy Server discarded the accounting request for a user.
62766276 不適用N/A 媒體Medium 網路原則伺服器隔離的使用者。Network Policy Server quarantined a user.
62776277 不適用N/A 媒體Medium 網路原則伺服器授與使用者的存取,但將它放在探查,因為主機不符合定義的健康原則。Network Policy Server granted access to a user but put it on probation because the host did not meet the defined health policy.
62786278 不適用N/A 媒體Medium 網路原則伺服器授與完整存取權的使用者,因為主機達到健康定義的原則。Network Policy Server granted full access to a user because the host met the defined health policy.
62796279 不適用N/A 媒體Medium 網路原則伺服器鎖定帳號,因為嘗試重複的驗證失敗。Network Policy Server locked the user account due to repeated failed authentication attempts.
62806280 不適用N/A 媒體Medium 網路原則伺服器解除鎖定帳號。Network Policy Server unlocked the user account.
- 640640 媒體Medium 變更一般 account 資料庫General account database changed
- 619619 媒體Medium 變更品質服務原則Quality of Service Policy changed
2458624586 不適用N/A 媒體Medium 錯誤轉換磁碟區An error was encountered converting volume
2459224592 不適用N/A 媒體Medium 嘗試自動重新開機磁碟區 %2 轉換失敗。An attempt to automatically restart conversion on volume %2 failed.
2459324593 不適用N/A 媒體Medium 中繼資料寫入︰ 磁碟區 %2 傳回錯誤嘗試修改中繼資料。Metadata write: Volume %2 returning errors while trying to modify metadata. 如果失敗持續解密磁碟區If failures continue, decrypt volume
2459424594 不適用N/A 媒體Medium 中繼資料重建︰ 磁碟區 %2 寫入中繼資料的複本失敗,且可能會顯示為磁碟損壞。Metadata rebuild: An attempt to write a copy of metadata on volume %2 failed and may appear as disk corruption. 如果失敗持續解密磁碟區。If failures continue, decrypt volume.
46084608 512512 Low 開始 Windows。Windows is starting up.
46094609 513513 Low Windows 會關閉。Windows is shutting down.
46104610 514514 Low 本機安全性授權已載入驗證套件。An authentication package has been loaded by the Local Security Authority.
46114611 515515 Low 信任的登入處理程序已本機安全性授權已登記完畢。A trusted logon process has been registered with the Local Security Authority.
46124612 516516 Low 已用盡內部資源配置給佇列稽核訊息,導致某些稽核遺失。Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits.
46144614 518518 Low 已載入安全性經理,通知套件。A notification package has been loaded by the Security Account Manager.
46154615 519519 Low 無效使用 LPC 連接埠。Invalid use of LPC port.
46164616 520520 Low 已變更系統時間。The system time was changed.
46224622 不適用N/A Low 本機安全性授權已載入安全性套件。A security package has been loaded by the Local Security Authority.
46244624 528,540528,540 Low Account 已成功登入。An account was successfully logged on.
46254625 529-537,539529-537,539 Low Account 無法登入。An account failed to log on.
46344634 538538 Low Account 已登入。An account was logged off.
46464646 不適用N/A Low 開始使用的 ikemefuna udeze,綽號 DoS 防護模式。IKE DoS-prevention mode started.
46474647 551551 Low 使用者初始化登出。User initiated logoff.
46484648 552552 Low 使用明確的憑證嘗試登入。A logon was attempted using explicit credentials.
46504650 不適用N/A Low 已建立 IPsec 主要模式安全性關聯。An IPsec Main Mode security association was established. 不被支援延伸的模式。Extended Mode was not enabled. 未使用的憑證驗證。Certificate authentication was not used.
46514651 不適用N/A Low 已建立 IPsec 主要模式安全性關聯。An IPsec Main Mode security association was established. 不被支援延伸的模式。Extended Mode was not enabled. 使用適用於驗證憑證。A certificate was used for authentication.
46524652 不適用N/A Low IPsec 主要模式交涉失敗。An IPsec Main Mode negotiation failed.
46534653 不適用N/A Low IPsec 主要模式交涉失敗。An IPsec Main Mode negotiation failed.
46544654 不適用N/A Low IPsec 快速模式交涉失敗。An IPsec Quick Mode negotiation failed.
46554655 不適用N/A Low 結束 IPsec 主要模式安全性關聯。An IPsec Main Mode security association ended.
46564656 560560 Low 已要求物件控點。A handle to an object was requested.
46574657 567567 Low 已修改登錄值。A registry value was modified.
46584658 562562 Low 已關閉物件控點。The handle to an object was closed.
46594659 不適用N/A Low 想要 delete 與: 已要求物件控點。A handle to an object was requested with intent to delete.
46604660 564564 Low 已物件。An object was deleted.
46614661 565565 Low 已要求物件控點。A handle to an object was requested.
46624662 566566 Low 已對物件執行作業。An operation was performed on an object.
46634663 567567 Low 嘗試存取物件。An attempt was made to access an object.
46644664 不適用N/A Low 嘗試建立永久連結。An attempt was made to create a hard link.
46654665 不適用N/A Low 嘗試建立應用程式 client 操作。An attempt was made to create an application client context.
46664666 不適用N/A Low 應用程式嘗試操作:An application attempted an operation:
46674667 不適用N/A Low 已使用的應用程式 client 操作。An application client context was deleted.
46684668 不適用N/A Low 初始化應用程式。An application was initialized.
46704670 不適用N/A Low 已變更物件的權限。Permissions on an object were changed.
46714671 不適用N/A Low 應用程式嘗試透過 tbs 存取被封鎖的序數。An application attempted to access a blocked ordinal through the TBS.
46724672 576576 Low 特殊權限指派給新的登入。Special privileges assigned to new logon.
46734673 577577 Low 已呼叫有特殊權限的服務。A privileged service was called.
46744674 578578 Low 已嘗試操作有特殊權限的物件。An operation was attempted on a privileged object.
46884688 592592 Low 已建立新的處理程序。A new process has been created.
46894689 593593 Low 已結束處理程序。A process has exited.
46904690 594594 Low 嘗試複製物件控點。An attempt was made to duplicate a handle to an object.
46914691 595595 Low 已要求間接存取物件。Indirect access to an object was requested.
46944694 不適用N/A Low 已嘗試保護可稽核的受保護資料。Protection of auditable protected data was attempted.
46954695 不適用N/A Low 嘗試︰ 可稽核的受保護資料。Unprotection of auditable protected data was attempted.
46964696 600600 Low 主要 token 已指派給處理。A primary token was assigned to process.
46974697 601601 Low 嘗試安裝 serviceAttempt to install a service
46984698 602602 Low 已建立排程的工作。A scheduled task was created.
46994699 602602 Low 已排定的工作。A scheduled task was deleted.
47004700 602602 Low 已支援排定的工作。A scheduled task was enabled.
47014701 602602 Low 已停用排程的工作。A scheduled task was disabled.
47024702 602602 Low 已更新排程的工作。A scheduled task was updated.
47044704 608608 Low 已指派使用者權利。A user right was assigned.
47054705 609609 Low 已移除使用者權利。A user right was removed.
47074707 611611 Low 已移除網域信任。A trust to a domain was removed.
47094709 不適用N/A Low 開始 IPsec 服務。IPsec Services was started.
47104710 不適用N/A Low IPsec 服務已停用。IPsec Services was disabled.
47114711 不適用N/A Low 可能會包含下列任一: PAStore 引擎套用的 Active Directory 儲存 ipsec 本機快取的複製到電腦。PAStore 引擎 Active Directory 儲存 IPsec 原則套用到電腦。PAStore 引擎登錄本機存放裝置 IPsec 原則套用到電腦。PAStore 引擎無法在電腦上套用 Active Directory 儲存 ipsec 本機快取的複本。無法在電腦上套用 Active Directory 儲存 ipsec PAStore 引擎。無法在電腦上套用本機登錄儲存 ipsec PAStore 引擎。無法在電腦上套用 active IPsec 原則的一些規則 PAStore 引擎。無法載入 directory 儲存在電腦上 ipsec PAStore 引擎。載入 directory 儲存在電腦上 ipsec PAStore 引擎。無法載入本機存放裝置在電腦上 ipsec PAStore 引擎。本機存放裝置在電腦上 ipsec 載入 PAStore 引擎。PAStore 引擎輪詢變更使用 IPsec 原則和偵測到的任何變更。May contain any one of the following: PAStore Engine applied locally cached copy of Active Directory storage IPsec policy on the computer.PAStore Engine applied Active Directory storage IPsec policy on the computer.PAStore Engine applied local registry storage IPsec policy on the computer.PAStore Engine failed to apply locally cached copy of Active Directory storage IPsec policy on the computer.PAStore Engine failed to apply Active Directory storage IPsec policy on the computer.PAStore Engine failed to apply local registry storage IPsec policy on the computer.PAStore Engine failed to apply some rules of the active IPsec policy on the computer.PAStore Engine failed to load directory storage IPsec policy on the computer.PAStore Engine loaded directory storage IPsec policy on the computer.PAStore Engine failed to load local storage IPsec policy on the computer.PAStore Engine loaded local storage IPsec policy on the computer.PAStore Engine polled for changes to the active IPsec policy and detected no changes.
47124712 不適用N/A Low IPsec 的服務發生嚴重可能會失敗。IPsec Services encountered a potentially serious failure.
47174717 621621 Low Account 已授與系統安全性存取。System security access was granted to an account.
47184718 622622 Low 從 「 account 移除安全性系統的存取。System security access was removed from an account.
47204720 624624 Low 建立的使用者 account。A user account was created.
47224722 626626 Low 使用者 account 的支援。A user account was enabled.
47234723 627627 Low 嘗試變更密碼。An attempt was made to change an account's password.
47254725 629629 Low 使用者 account 已停用。A user account was disabled.
47264726 630630 Low 已帳號。A user account was deleted.
47284728 632632 Low 成員已新增安全性的全域群組。A member was added to a security-enabled global group.
47294729 633633 Low 成員已移除從安全性的全域群組。A member was removed from a security-enabled global group.
47304730 634634 Low 已安全性的全域群組。A security-enabled global group was deleted.
47314731 635635 Low 已建立安全性功能的本機群組。A security-enabled local group was created.
47324732 636636 Low 已加入安全性功能的本機群組成員。A member was added to a security-enabled local group.
47334733 637637 Low 已將成員的安全性功能的本機群組中移除。A member was removed from a security-enabled local group.
47344734 638638 Low 已安全性功能的本機群組。A security-enabled local group was deleted.
47384738 642642 Low 使用者 account 已變更。A user account was changed.
47404740 644644 Low 使用者 account 被鎖定。A user account was locked out.
47414741 645645 Low 電腦 account 已變更。A computer account was changed.
47424742 646646 Low 電腦 account 已變更。A computer account was changed.
47434743 647647 Low 已電腦 account。A computer account was deleted.
47444744 648648 Low 已建立停用安全性的本機群組。A security-disabled local group was created.
47454745 649649 Low 已變更停用安全性的本機群組。A security-disabled local group was changed.
47464746 650650 Low 停用安全性的本機群組成員已加入。A member was added to a security-disabled local group.
47474747 651651 Low 將成員已自停用安全性的本機群組移除。A member was removed from a security-disabled local group.
47484748 652652 Low 已停用安全性的本機群組。A security-disabled local group was deleted.
47494749 653653 Low 已建立停用安全性的全域群組。A security-disabled global group was created.
47504750 654654 Low 已變更停用安全性的全域群組。A security-disabled global group was changed.
47514751 655655 Low 成員已新增至停用安全性的全域群組。A member was added to a security-disabled global group.
47524752 656656 Low 成員已自停用安全性的全域群組中移除。A member was removed from a security-disabled global group.
47534753 657657 Low 已停用安全性的全域群組。A security-disabled global group was deleted.
47564756 660660 Low 已加入安全性功能的通用群組成員。A member was added to a security-enabled universal group.
47574757 661661 Low 已成員的安全性功能的通用群組中移除。A member was removed from a security-enabled universal group.
47584758 662662 Low 已安全性功能的通用群組。A security-enabled universal group was deleted.
47594759 663663 Low 已建立停用安全性的通用群組。A security-disabled universal group was created.
47604760 664664 Low 已變更停用安全性的通用群組。A security-disabled universal group was changed.
47614761 665665 Low 成員已新增至通用停用安全性的群組。A member was added to a security-disabled universal group.
47624762 666666 Low 成員已自停用安全性的萬用群組移除。A member was removed from a security-disabled universal group.
47674767 671671 Low 使用者 account 已解除鎖定。A user account was unlocked.
47684768 672,676672,676 Low 已要求 Kerberos 驗證票證 (TGT)。A Kerberos authentication ticket (TGT) was requested.
47694769 673673 Low 已要求 Kerberos 服務票證。A Kerberos service ticket was requested.
47704770 674674 Low 已更新 Kerberos 服務票證。A Kerberos service ticket was renewed.
47714771 675675 Low F:kerberos 預先驗證失敗。Kerberos pre-authentication failed.
47724772 672672 Low Kerberos 驗證票證要求失敗。A Kerberos authentication ticket request failed.
47744774 678678 Low Account 已對應的登入。An account was mapped for logon.
47754775 679679 Low 無法登入的對應 account。An account could not be mapped for logon.
47764776 680,681680,681 Low 驗證 account 的憑證嘗試網域控制站。The domain controller attempted to validate the credentials for an account.
47774777 不適用N/A Low 網域控制站無法驗證 account 的認證。The domain controller failed to validate the credentials for an account.
47784778 682682 Low 工作階段已重新連接到視窗工作站。A session was reconnected to a Window Station.
47794779 683683 Low 工作階段中斷從視窗工作站。A session was disconnected from a Window Station.
47814781 685685 Low 已變更 account 的名稱:The name of an account was changed:
47824782 不適用N/A Low 密碼湊 account 存取。The password hash an account was accessed.
47834783 667667 Low 建立基本的應用程式群組。A basic application group was created.
47844784 不適用N/A Low 變更基本應用程式群組。A basic application group was changed.
47854785 689689 Low 成員已新增至基本的應用程式群組。A member was added to a basic application group.
47864786 690690 Low 成員已移除從基本應用程式群組。A member was removed from a basic application group.
47874787 691691 Low 非成員已新增至基本的應用程式群組。A nonmember was added to a basic application group.
47884788 692692 Low 非成員已自基本的應用程式群組中移除。A nonmember was removed from a basic application group.
47894789 693693 Low 已基本的應用程式群組。A basic application group was deleted.
47904790 694694 Low 建立 LDAP 查詢群組。An LDAP query group was created.
47934793 不適用N/A Low 已呼叫密碼原則檢查 API。The Password Policy Checking API was called.
48004800 不適用N/A Low 已鎖定工作站。The workstation was locked.
48014801 不適用N/A Low 已鎖定工作站。The workstation was unlocked.
48024802 不適用N/A Low 已叫用螢幕保護裝置。The screen saver was invoked.
48034803 不適用N/A Low 已關閉螢幕保護裝置。The screen saver was dismissed.
48644864 不適用N/A Low 偵測到命名空間衝突。A namespace collision was detected.
48694869 773773 Low 憑證服務接收重新提交的憑證要求。Certificate Services received a resubmitted certificate request.
48714871 775775 Low 憑證服務收到發行憑證撤銷清單 (CRL) 的要求。Certificate Services received a request to publish the certificate revocation list (CRL).
48724872 776776 Low 憑證服務發行憑證撤銷清單 (CRL)。Certificate Services published the certificate revocation list (CRL).
48734873 777777 Low 變更憑證要求擴充功能。A certificate request extension changed.
48744874 778778 Low 變更一或多個憑證要求屬性。One or more certificate request attributes changed.
48754875 779779 Low 憑證服務收到關機的要求。Certificate Services received a request to shut down.
48764876 780780 Low 開始使用的憑證服務備份。Certificate Services backup started.
48774877 781781 Low 憑證服務完成備份。Certificate Services backup completed.
48784878 782782 Low 憑證服務還原的開始。Certificate Services restore started.
48794879 783783 Low 憑證完成服務還原。Certificate Services restore completed.
48804880 784784 Low 開始使用憑證的服務。Certificate Services started.
48814881 785785 Low 停止憑證服務。Certificate Services stopped.
48834883 787787 Low 憑證服務擷取保存的金鑰。Certificate Services retrieved an archived key.
48844884 788788 Low 認證服務會匯入其資料庫的憑證。Certificate Services imported a certificate into its database.
48864886 790790 Low 憑證服務收到憑證要求。Certificate Services received a certificate request.
48874887 791791 Low 已核准憑證要求並且發行憑證的憑證服務。Certificate Services approved a certificate request and issued a certificate.
48884888 792792 Low 憑證服務拒憑證要求。Certificate Services denied a certificate request.
48894889 793793 Low 憑證服務設定為擱置中的憑證要求的狀態。Certificate Services set the status of a certificate request to pending.
48914891 795795 Low 憑證服務中變更設定項目。A configuration entry changed in Certificate Services.
48934893 797797 Low 憑證服務封存按鍵。Certificate Services archived a key.
48944894 798798 Low 憑證服務匯入並封存按鍵。Certificate Services imported and archived a key.
48954895 799799 Low 憑證服務發行 Active Directory Domain Services CA 憑證。Certificate Services published the CA certificate to Active Directory Domain Services.
48984898 802802 Low 憑證服務載入範本。Certificate Services loaded a template.
49024902 不適用N/A Low 建立使用者稽核原則的資料表。The Per-user audit policy table was created.
49044904 不適用N/A Low 嘗試登記安全性事件來源。An attempt was made to register a security event source.
49054905 不適用N/A Low 嘗試移除的安全性事件來源。An attempt was made to unregister a security event source.
49094909 不適用N/A Low 已變更 tbs 的本機原則設定。The local policy settings for the TBS were changed.
49104910 不適用N/A Low 已變更 tbs 的群組原則設定。The Group Policy settings for the TBS were changed.
49284928 不適用N/A Low 已建立 Active Directory 複本來源命名操作。An Active Directory replica source naming context was established.
49294929 不適用N/A Low 已移除 Active Directory 複本來源命名操作。An Active Directory replica source naming context was removed.
49304930 不適用N/A Low 已修改 Active Directory 複本來源命名操作。An Active Directory replica source naming context was modified.
49314931 不適用N/A Low 已修改 Active Directory 複本目的地命名操作。An Active Directory replica destination naming context was modified.
49324932 不適用N/A Low 同步處理的 Active Directory 命名操作已經開始的複本。Synchronization of a replica of an Active Directory naming context has begun.
49334933 不適用N/A Low 同步處理的 Active Directory 命名操作已結束的複本。Synchronization of a replica of an Active Directory naming context has ended.
49344934 不適用N/A Low 已複寫 Active Directory 物件的屬性。Attributes of an Active Directory object were replicated.
49354935 不適用N/A Low ︰ 複寫失敗開始。Replication failure begins.
49364936 不適用N/A Low ︰ 複寫失敗結束。Replication failure ends.
49374937 不適用N/A Low 從複本移除延遲物件。A lingering object was removed from a replica.
49444944 不適用N/A Low 開始使用 Windows 防火牆時,使用下列的原則。The following policy was active when the Windows Firewall started.
49454945 不適用N/A Low 當 Windows 防火牆開始,已列出規則。A rule was listed when the Windows Firewall started.
49464946 不適用N/A Low 變更對 Windows 防火牆例外清單。A change has been made to Windows Firewall exception list. 已新增規則。A rule was added.
49474947 不適用N/A Low 變更對 Windows 防火牆例外清單。A change has been made to Windows Firewall exception list. 已修改規則。A rule was modified.
49484948 不適用N/A Low 變更對 Windows 防火牆例外清單。A change has been made to Windows Firewall exception list. 已規則。A rule was deleted.
49494949 不適用N/A Low 設定 Windows 防火牆還原成預設值。Windows Firewall settings were restored to the default values.
49504950 不適用N/A Low Windows 防火牆設定已變更。A Windows Firewall setting has changed.
49514951 不適用N/A Low 因為 Windows 防火牆無法辨識的最新主要版本編號規則已忽略。A rule has been ignored because its major version number was not recognized by Windows Firewall.
49524952 不適用N/A Low 因為 Windows 防火牆無法辨識其次要版本號碼已忽略規則的部分。Parts of a rule have been ignored because its minor version number was not recognized by Windows Firewall. 將會執行規則的其他部分。The other parts of the rule will be enforced.
49534953 不適用N/A Low 因為無法剖析規則已防火牆 Windows 來忽略規則。A rule has been ignored by Windows Firewall because it could not parse the rule.
49544954 不適用N/A Low 已變更 Windows 防火牆群組原則設定。Windows Firewall Group Policy settings have changed. 已套用新的設定。The new settings have been applied.
49564956 不適用N/A Low Windows 防火牆已經目前的設定檔。Windows Firewall has changed the active profile.
49574957 不適用N/A Low Windows 防火牆不適用於下列規則:Windows Firewall did not apply the following rule:
49584958 不適用N/A Low Windows 防火牆不適用於下列規則,因為規則參考不在此電腦上設定的項目:Windows Firewall did not apply the following rule because the rule referred to items not configured on this computer:
49794979 不適用N/A Low 建立 IPsec 主要模式和延伸模式任何安全性關聯。IPsec Main Mode and Extended Mode security associations were established.
49804980 不適用N/A Low 建立 IPsec 主要模式和延伸模式任何安全性關聯。IPsec Main Mode and Extended Mode security associations were established.
49814981 不適用N/A Low 建立 IPsec 主要模式和延伸模式任何安全性關聯。IPsec Main Mode and Extended Mode security associations were established.
49824982 不適用N/A Low 建立 IPsec 主要模式和延伸模式任何安全性關聯。IPsec Main Mode and Extended Mode security associations were established.
49854985 不適用N/A Low 已變更交易狀態。The state of a transaction has changed.
50245024 不適用N/A Low 已成功地開始 Windows 防火牆服務。The Windows Firewall Service has started successfully.
50255025 不適用N/A Low Windows 防火牆服務已停止。The Windows Firewall Service has been stopped.
50315031 不適用N/A Low Windows 防火牆服務封鎖接受取網路上的應用程式。The Windows Firewall Service blocked an application from accepting incoming connections on the network.
50325032 不適用N/A Low Windows 防火牆無法通知,它會封鎖接受取網路上的應用程式的使用者。Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.
50335033 不適用N/A Low 已成功地開始 Windows 防火牆驅動程式。The Windows Firewall Driver has started successfully.
50345034 不適用N/A Low 已停止 Windows 防火牆驅動程式。The Windows Firewall Driver has been stopped.
50395039 不適用N/A Low 登錄按鍵已擬化檔案。A registry key was virtualized.
50405040 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已新增驗證設定。An Authentication Set was added.
50415041 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已修改驗證設定。An Authentication Set was modified.
50425042 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已驗證的設定。An Authentication Set was deleted.
50435043 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 連接安全性已新增規則。A Connection Security Rule was added.
50445044 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 連接安全性已修改規則。A Connection Security Rule was modified.
50455045 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已連接安全性規則。A Connection Security Rule was deleted.
50465046 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已新增加密設定。A Crypto Set was added.
50475047 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已修改密碼編譯設定。A Crypto Set was modified.
50485048 不適用N/A Low IPsec 設定已變更。A change has been made to IPsec settings. 已加密設定。A Crypto Set was deleted.
50505050 不適用N/A Low 嘗試以程式設計方式停用使用 InetFwProfile.FirewallEnabled(False) 呼叫 Windows 防火牆An attempt to programmatically disable the Windows Firewall using a call to InetFwProfile.FirewallEnabled(False)
50515051 不適用N/A Low 檔案已擬化檔案。A file was virtualized.
50565056 不適用N/A Low 已執行密碼編譯自我測試。A cryptographic self test was performed.
50575057 不適用N/A Low 密碼編譯基本操作失敗。A cryptographic primitive operation failed.
50585058 不適用N/A Low 金鑰檔案作業。Key file operation.
50595059 不適用N/A Low 金鑰移轉作業。Key migration operation.
50605060 不適用N/A Low 驗證操作失敗。Verification operation failed.
50615061 不適用N/A Low 密碼編譯作業。Cryptographic operation.
50625062 不適用N/A Low 已執行核心模式密碼編譯自我測試。A kernel-mode cryptographic self test was performed.
50635063 不適用N/A Low 已嘗試密碼編譯提供者作業。A cryptographic provider operation was attempted.
50645064 不適用N/A Low 嘗試操作密碼編譯作業。A cryptographic context operation was attempted.
50655065 不適用N/A Low 嘗試修改密碼編譯操作。A cryptographic context modification was attempted.
50665066 不適用N/A Low 已嘗試密碼編譯函數作業。A cryptographic function operation was attempted.
50675067 不適用N/A Low 嘗試修改密碼編譯函數。A cryptographic function modification was attempted.
50685068 不適用N/A Low 已嘗試密碼編譯函數提供者作業。A cryptographic function provider operation was attempted.
50695069 不適用N/A Low 已嘗試密碼編譯函數屬性作業。A cryptographic function property operation was attempted.
50705070 不適用N/A Low 嘗試修改密碼編譯函數屬性。A cryptographic function property modification was attempted.
51255125 不適用N/A Low 要求提交給 OCSP 回應服務A request was submitted to the OCSP Responder Service
51265126 不適用N/A Low 簽署憑證來 OCSP 回應服務自動更新Signing Certificate was automatically updated by the OCSP Responder Service
51275127 不適用N/A Low 更新撤銷資訊成功 OCSP 撤銷提供者The OCSP Revocation Provider successfully updated the revocation information
51365136 566566 Low 已修改 directory 服務物件。A directory service object was modified.
51375137 566566 Low 建立服務 directory 物件。A directory service object was created.
51385138 不適用N/A Low 服務 directory 物件是復原。A directory service object was undeleted.
51395139 不適用N/A Low 移動服務 directory 物件。A directory service object was moved.
51405140 不適用N/A Low 存取網路共用物件。A network share object was accessed.
51415141 不適用N/A Low 已 directory 服務物件。A directory service object was deleted.
51525152 不適用N/A Low Windows 篩選平台封鎖了封包。The Windows Filtering Platform blocked a packet.
51535153 不適用N/A Low 更嚴格的 Windows 篩選平台篩選封鎖了封包。A more restrictive Windows Filtering Platform filter has blocked a packet.
51545154 不適用N/A Low Windows 篩選平台已允許的應用程式或服務聆聽取連接埠。The Windows Filtering Platform has permitted an application or service to listen on a port for incoming connections.
51555155 不適用N/A Low Windows 篩選平台已封鎖應用程式或服務取接聽連接埠。The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections.
51565156 不適用N/A Low Windows 篩選平台已允許連接。The Windows Filtering Platform has allowed a connection.
51575157 不適用N/A Low Windows 篩選平台已封鎖連接。The Windows Filtering Platform has blocked a connection.
51585158 不適用N/A Low Windows 篩選平台已允許繫結到本機連接埠。The Windows Filtering Platform has permitted a bind to a local port.
51595159 不適用N/A Low Windows 篩選平台已封鎖繫結到本機連接埠。The Windows Filtering Platform has blocked a bind to a local port.
53785378 不適用N/A Low 原則不允許要求的認證委派。The requested credentials delegation was disallowed by policy.
54405440 不適用N/A Low 下列圖說已經有 Windows 篩選平台基本篩選引擎會開始時。The following callout was present when the Windows Filtering Platform Base Filtering Engine started.
54415441 不適用N/A Low 下列篩選已經有 Windows 篩選平台基本篩選引擎會開始時。The following filter was present when the Windows Filtering Platform Base Filtering Engine started.
54425442 不適用N/A Low 下列提供者已有時開始使用 Windows 篩選平台基本篩選引擎。The following provider was present when the Windows Filtering Platform Base Filtering Engine started.
54435443 不適用N/A Low 以下提供者操作已有時開始使用 Windows 篩選平台基本篩選引擎。The following provider context was present when the Windows Filtering Platform Base Filtering Engine started.
54445444 不適用N/A Low 下列層已經有 Windows 篩選平台基本篩選引擎會開始時。The following sublayer was present when the Windows Filtering Platform Base Filtering Engine started.
54465446 不適用N/A Low 已變更 Windows 篩選平台圖說。A Windows Filtering Platform callout has been changed.
54475447 不適用N/A Low 已變更 Windows 篩選平台篩選。A Windows Filtering Platform filter has been changed.
54485448 不適用N/A Low 已變更 Windows 篩選平台提供者。A Windows Filtering Platform provider has been changed.
54495449 不適用N/A Low 已變更 Windows 篩選平台提供者操作。A Windows Filtering Platform provider context has been changed.
54505450 不適用N/A Low 已變更 Windows 篩選平台子層。A Windows Filtering Platform sublayer has been changed.
54515451 不適用N/A Low 已建立 IPsec 快速模式安全性關聯。An IPsec Quick Mode security association was established.
54525452 不適用N/A Low 結束 IPsec 快速模式安全性關聯。An IPsec Quick Mode security association ended.
54565456 不適用N/A Low PAStore 引擎 Active Directory 儲存 IPsec 原則套用到電腦。PAStore Engine applied Active Directory storage IPsec policy on the computer.
54575457 不適用N/A Low 無法在電腦上套用 Active Directory 儲存 ipsec PAStore 引擎。PAStore Engine failed to apply Active Directory storage IPsec policy on the computer.
54585458 不適用N/A Low PAStore 引擎套用到電腦的 Active Directory 儲存 ipsec 本機快取的複本。PAStore Engine applied locally cached copy of Active Directory storage IPsec policy on the computer.
54595459 不適用N/A Low PAStore 引擎無法在電腦上套用 Active Directory 儲存 ipsec 本機快取的複本。PAStore Engine failed to apply locally cached copy of Active Directory storage IPsec policy on the computer.
54605460 不適用N/A Low PAStore 引擎登錄本機存放裝置 IPsec 原則套用到電腦。PAStore Engine applied local registry storage IPsec policy on the computer.
54615461 不適用N/A Low 無法在電腦上套用本機登錄儲存 ipsec PAStore 引擎。PAStore Engine failed to apply local registry storage IPsec policy on the computer.
54625462 不適用N/A Low 無法在電腦上套用 active IPsec 原則的一些規則 PAStore 引擎。PAStore Engine failed to apply some rules of the active IPsec policy on the computer. 使用安全監視器嵌入式管理單元診斷的問題。Use the IP Security Monitor snap-in to diagnose the problem.
54635463 不適用N/A Low PAStore 引擎輪詢變更使用 IPsec 原則和偵測到的任何變更。PAStore Engine polled for changes to the active IPsec policy and detected no changes.
54645464 不適用N/A Low PAStore 引擎輪詢使用的 IPsec 原則變更、 偵測到的變更,並其套用 IPsec 服務。PAStore Engine polled for changes to the active IPsec policy, detected changes, and applied them to IPsec Services.
54655465 不適用N/A Low PAStore 引擎收到的控制項強制重新載入 IPsec 原則和成功處理控制項。PAStore Engine received a control for forced reloading of IPsec policy and processed the control successfully.
54665466 不適用N/A Low Active Directory 無法透過,而且改為使用 Active Directory ipsec 中央的 Active Directory IPsec 原則對被 PAStore 引擎。PAStore Engine polled for changes to the Active Directory IPsec policy, determined that Active Directory cannot be reached, and will use the cached copy of the Active Directory IPsec policy instead. 自從上次的投票可能會不會套用 Active Directory ipsec 所做的任何變更。Any changes made to the Active Directory IPsec policy since the last poll could not be applied.
54675467 不適用N/A Low Active Directory IPsec 原則,判斷 Active Directory 可以並不發現任何變更原則對被 PAStore 引擎。PAStore Engine polled for changes to the Active Directory IPsec policy, determined that Active Directory can be reached, and found no changes to the policy. 已不再使用的 Active Directory ipsec 快取的複本。The cached copy of the Active Directory IPsec policy is no longer being used.
54685468 不適用N/A Low 變更判斷該 Active Directory 可以、 發現變更設定原則,並套用那些變更的 Active Directory IPsec 原則被 PAStore 引擎。PAStore Engine polled for changes to the Active Directory IPsec policy, determined that Active Directory can be reached, found changes to the policy, and applied those changes. 已不再使用的 Active Directory ipsec 快取的複本。The cached copy of the Active Directory IPsec policy is no longer being used.
54715471 不適用N/A Low 本機存放裝置在電腦上 ipsec 載入 PAStore 引擎。PAStore Engine loaded local storage IPsec policy on the computer.
54725472 不適用N/A Low 無法載入本機存放裝置在電腦上 ipsec PAStore 引擎。PAStore Engine failed to load local storage IPsec policy on the computer.
54735473 不適用N/A Low 載入 directory 儲存在電腦上 ipsec PAStore 引擎。PAStore Engine loaded directory storage IPsec policy on the computer.
54745474 不適用N/A Low 無法載入 directory 儲存在電腦上 ipsec PAStore 引擎。PAStore Engine failed to load directory storage IPsec policy on the computer.
54775477 不適用N/A Low 新增篩選快速模式無法 PAStore 引擎。PAStore Engine failed to add quick mode filter.
54795479 不適用N/A Low 已成功關機 IPsec 服務。IPsec Services has been shut down successfully. 關閉 IPsec 服務可讓電腦更攻擊風險的網路,或開放電腦以潛在的風險。The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks.
56325632 不適用N/A Low 已要求驗證 wireless 網路。A request was made to authenticate to a wireless network.
56335633 不適用N/A Low 已要求驗證有線網路。A request was made to authenticate to a wired network.
57125712 不適用N/A Low 嘗試遠端程序呼叫 (RPC)。A Remote Procedure Call (RPC) was attempted.
58885888 不適用N/A Low 已修改 COM + Catalog 中的物件。An object in the COM+ Catalog was modified.
58895889 不適用N/A Low 從 COM + Catalog 已物件。An object was deleted from the COM+ Catalog.
58905890 不適用N/A Low 新增到 COM + Catalog 物件。An object was added to the COM+ Catalog.
60086008 不適用N/A Low 意外先前系統關機The previous system shutdown was unexpected
61446144 不適用N/A Low 已成功套用群組原則物件的安全性原則。Security policy in the Group Policy objects has been applied successfully.
62726272 不適用N/A Low 網路原則伺服器授與使用者存取。Network Policy Server granted access to a user.
不適用N/A 561561 Low 已要求物件控點。A handle to an object was requested.
不適用N/A 563563 Low 適用於 delete 物件開放Object open for delete
不適用N/A 625625 Low 變更使用者 Account 類型User Account Type Changed
不適用N/A 613613 Low 開始使用 IPsec 原則代理程式IPsec policy agent started
不適用N/A 614614 Low 停用 IPsec 原則代理程式IPsec policy agent disabled
不適用N/A 615615 Low IPsec 原則代理程式IPsec policy agent
不適用N/A 616616 Low IPsec 原則代理程式發生嚴重錯誤潛在IPsec policy agent encountered a potential serious failure
2457724577 不適用N/A Low 加密的磁碟區開始Encryption of volume started
2457824578 不適用N/A Low 加密的磁碟區停止Encryption of volume stopped
2457924579 不適用N/A Low 加密的磁碟區完成Encryption of volume completed
2458024580 不適用N/A Low 開始使用的磁碟區的解密Decryption of volume started
2458124581 不適用N/A Low 磁碟區停止的解密Decryption of volume stopped
2458224582 不適用N/A Low 磁碟區完成的解密Decryption of volume completed
2458324583 不適用N/A Low 磁碟區開始轉換同事執行緒Conversion worker thread for volume started
2458424584 不適用N/A Low 暫時停止轉換背景工作討論串中的有磁碟區Conversion worker thread for volume temporarily stopped
2458824588 不適用N/A Low 磁碟區 %2 轉換作業發生磁錯誤。The conversion operation on volume %2 encountered a bad sector error. 請確認此磁碟區上的資料Please validate the data on this volume
2459524595 不適用N/A Low 磁碟區 %2 包含錯誤叢集。Volume %2 contains bad clusters. 這些叢集將會轉換期間略過。These clusters will be skipped during conversion.
2462124621 不適用N/A Low 開始狀態的核取︰ 磁碟區轉換交易復原 %2。Initial state check: Rolling volume conversion transaction on %2.
50495049 不適用N/A Low 已 IPsec 安全性關聯。An IPsec Security Association was deleted.
54785478 不適用N/A Low 已成功開始 IPsec 服務。IPsec Services has started successfully.

注意

請參考Microsoft 的支援文章 947226清單,許多安全性事件 Id 和他們的意義。Refer to Microsoft Support article 947226 for lists of many security event IDs and their meanings.

執行wevtutil gp Microsoft-Windows-安全性-稽核 /ge /gm:true以取得非常的詳細清單的所有安全性事件 IdRun wevtutil gp Microsoft-Windows-Security-Auditing /ge /gm:true to get a very detailed listing of all security event IDs

如需關於 Windows 的安全性事件 Id 和他們的意義,查看 Microsoft 的支援文章在 Windows Vista 和 Windows Server 2008 的安全性事件描述描述在 Windows 7 和 Windows Server 2008 R2 的安全性事件For more information about Windows security event IDs and their meanings, see the Microsoft Support articles Description of security events in Windows Vista and in Windows Server 2008 and Description of security events in Windows 7 and in Windows Server 2008 R2. 您也可以下載安全性稽核事件適用於 Windows 7 和 Windows Server 2008 R2Windows 8 和 Windows Server 2012 安全性事件詳細資料,其中提供詳細試算表格式參考作業系統事件資訊。You can also download Security Audit Events for Windows 7 and Windows Server 2008 R2 and Windows 8 and Windows Server 2012 Security Event Details, which provide detailed event information for the referenced operating systems in spreadsheet format.